On 06.06.19 22:24, Jens Reyer wrote: > The referenced ChangeLog was: [...] I missed a second entry:> chmd_read_headers(): a CHM file name beginning "::" but shorter > than 33 bytes will lead to reading past the freshly-allocated > name buffer - checks for specific control filenames didn't take > length into account. Thanks to ADLab of Venustech for the report > and proof of concept.